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Content of Amendment 

(1) Amending the "detecting a virus source computer based on the 
communication information obtained with respect to the virus intrusion 
when the virus intrudes into the decoy" in lines 8 to 10 in claim 1 of the 
originally filed application into "obtaining communication information when 
a virus intrudes". 

(2) Amending the "making an antivirus attack on the virus source 
computer through the network for suppressing operation of the virus" in line 
11 in claim lof the originally filed application into "sending a message 
announcing an antivirus attack on the virus source computer". 

(3) Inserting "a decoy accessible through the network is provided to a 
computer that monitors intrusion of a virus, for receiving access to said 
decoy to obtain communication information and to detect virus intrusion; 
and" in between lines 2 and 3 in claim 2 of the originally filed application. 

(4) Amending "intrusion of a virus into said decoy means, and then on 
detecting virus intrusion" in lines 5 to 7 in claim 6 of the originally filed 
application into "detects intrusion of a virus". 

(5) Amending "and a computer attack means" ranging in lines 7 to 8 in 
claim 6 of the originally filed application into "and a message sending means 
that sends a message for announcing a start of the attack, to the infected 
computer into "a message sending means that sends a message for 
announcing a start of the attack, to the infected computer". 

(6) Amending "said decoy means is one or more of a decoy folder stored in a 
storage unit, a decoy application stored in the storage unit, and a server 
formed virtually in the storage unit" in lines 4 to 5 in claim 7 of the 
originally filed application into "said system further comprises a decoy 
means accessible through the network; and said communication information 
analysis means detects virus intrusion into said decoy means, and on 
detection of the virus intrusion, detects a virus source computer, based on 
the communication information obtained when the virus intrudes" 

(7) Amending "method" in line 1, claim 9 of the originally filed application 
into "system". 

(8) Amending "Claims 8," in line 2, claim 11 of the originally filed 
application into "Claims 6, 7, 8,". 

(9) Deleting the claim 14 in the originally filed application. 
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(10) Amending "Claims 8/' in line 2, claim 15 of the originally filed 
application into "Claims 6, 7, 8/'. 

(11) Amending "Claims 8," in line 2, claim 16 of the originally filed 
application into "Claims 6, 7, 8,". 

(12) Amending "A program for making a computer prevent virus infection 
by detecting the virus infection in a network" in lines 1 and 2 and "intrusion 
of a virus into a decoy means accessible through the network" in lines 5 and 
6 in claim 18 of the originally filed application into "detects intrusion of a 
virus". 

(13) Amending "a computer attack means that makes an antivirus attack 
on the virus source computer through the network, for suppressing 
operation of the virus" in lines 9 to 11 into "a computer attack means that 
makes an antivirus attack on the virus source computer through the 
network, for suppressing operation of the virus, "and a message sending 
means that sends a message for announcing a start of the attack, to the 
infected computer". 

(14) Deleting the claim 19 in the originally filed application. 

(15) Adding claim 20 which recites "A system for preventing virus infection 
by detecting the virus infection in a network, comprising- a communication 
information analysis means that detects intrusion of a virus, and on 
detecting virus intrusion, detects a virus source computer, based on 
communication information obtained when the virus intrudes; a computer 
attack means that makes an antivirus attack on the virus source computer 
through the network, for suppressing operation of the virus; and an alarm 
sound generation means that generates an alarm sound in an attacking 
terminal unit at a start of the attack or after the start of the attack". 

(16) Adding claim 21 which recites "A system for preventing virus infection 
by detecting the virus infection in a network, comprising^ a communication 
information analysis means that detects intrusion of a virus, and on 
detecting virus intrusion, detects a virus source computer, based on 
communication information obtained when the virus intrudes; a detection 
report transmission means that sends a detection report to an administrator 
of the virus source computer". 



2 



